CVE-2012-3026

rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3021.

• CWE-20

• http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15050Vendor Advisory
• http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15050/en_US/GEIP12-10%20Security%20Advisory%20-%20Proficy%20Portal%20rifsrvd.pdfVendor Advisory
• http://www.securityfocus.com/bid/55935
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdfUS Government Resource
• http://support.ge-ip.com/support/index?page=kbchannel&id=S:KB15050Vendor Advisory
• http://support.ge-ip.com/support/resources/sites/GE_FANUC_SUPPORT/content/live/KB/15000/KB15050/en_US/GEIP12-10%20Security%20Advisory%20-%20Proficy%20Portal%20rifsrvd.pdfVendor Advisory
• http://www.securityfocus.com/bid/55935
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-234-01.pdfUS Government Resource

Published

Nov 1, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3018The lockout-recovery feature in the Security Configurator co…
• CVE-2012-3020The Siemens Synco OZW Web Server devices OZW672.*, OZW772.*,…
• CVE-2012-3021rifsrvd.exe in the Remote Interface Service in GE Intelligen…
• CVE-2012-3022The SaveToFile method in a certain ActiveX control in TrendD…
• CVE-2012-3024Tridium Niagara AX Framework through 3.6 uses predictable va…
• CVE-2012-3025The default configuration of Tridium Niagara AX Framework th…
• CVE-2012-3027Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2012-3028Cross-site request forgery (CSRF) vulnerability in WebNaviga…
• CVE-2012-3029Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2012-3030WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used i…
• CVE-2012-3031Multiple cross-site scripting (XSS) vulnerabilities in WebNa…
• CVE-2012-3032SQL injection vulnerability in WebNavigator in Siemens WinCC…